@@ -32,20 +32,20 @@ jobs:
32
32
env :
33
33
RUSTC_BOOTSTRAP : 1
34
34
steps :
35
-
36
- -
uses :
actions-rs/[email protected]
35
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
36
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
37
37
with :
38
38
profile : minimal
39
39
toolchain : stable
40
40
override : true
41
- -
uses :
Swatinem/[email protected]
41
+ - uses : Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641 # renovate: tag= v1.3.0
42
42
with :
43
43
key : udeps
44
- - uses : actions-rs/cargo@v1
44
+ - uses : actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # renovate: tag=v1.0.3
45
45
with :
46
46
command : install
47
47
args : cargo-udeps --locked
48
- - uses : actions-rs/cargo@v1
48
+ - uses : actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # renovate: tag=v1.0.3
49
49
with :
50
50
command : udeps
51
51
@@ -106,23 +106,23 @@ jobs:
106
106
continue-on-error : ${{ matrix.checks == 'advisories' }}
107
107
108
108
steps :
109
-
110
- -
uses :
EmbarkStudios/[email protected]
109
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
110
+ - uses : EmbarkStudios/cargo-deny-action@2a55392931cddc0ae1d7397515fd0951d39ebaf2 # renovate: tag= v1.2.10
111
111
with :
112
112
command : check ${{ matrix.checks }}
113
113
114
114
run_rustfmt :
115
115
name : Run Rustfmt
116
116
runs-on : ubuntu-latest
117
117
steps :
118
-
119
- -
uses :
actions-rs/[email protected]
118
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
119
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
120
120
with :
121
121
profile : minimal
122
122
toolchain : stable
123
123
components : rustfmt
124
124
override : true
125
- -
uses :
actions-rs/[email protected]
125
+ - uses : actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # renovate: tag= v1.0.3
126
126
with :
127
127
command : fmt
128
128
args : --all -- --check
@@ -131,20 +131,20 @@ jobs:
131
131
name : Run Clippy
132
132
runs-on : ubuntu-latest
133
133
steps :
134
-
135
- -
uses :
actions-rs/[email protected]
134
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
135
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
136
136
with :
137
137
profile : minimal
138
138
toolchain : stable
139
139
components : clippy
140
140
override : true
141
- -
uses :
Swatinem/[email protected]
141
+ - uses : Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641 # renovate: tag= v1.3.0
142
142
with :
143
143
key : clippy
144
144
- name : Run clippy action to produce annotations
145
145
env :
146
146
GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
147
- uses :
actions-rs/[email protected]
147
+ uses : actions-rs/clippy-check@b5b5f21f4797c02da247df37026fcd0a5024aa4d # renovate: tag= v1.0.7
148
148
if : env.GITHUB_TOKEN != null
149
149
with :
150
150
args : --all-targets -- -D warnings
@@ -159,17 +159,17 @@ jobs:
159
159
name : Run RustDoc
160
160
runs-on : ubuntu-latest
161
161
steps :
162
-
163
- -
uses :
actions-rs/[email protected]
162
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
163
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
164
164
with :
165
165
profile : minimal
166
166
toolchain : stable
167
167
components : rustfmt
168
168
override : true
169
- -
uses :
Swatinem/[email protected]
169
+ - uses : Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641 # renovate: tag= v1.3.0
170
170
with :
171
171
key : doc
172
- -
uses :
actions-rs/[email protected]
172
+ - uses : actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # renovate: tag= v1.0.3
173
173
with :
174
174
command : doc
175
175
args : --document-private-items
@@ -184,16 +184,16 @@ jobs:
184
184
- run_udeps
185
185
runs-on : ubuntu-latest
186
186
steps :
187
-
188
- -
uses :
actions-rs/[email protected]
187
+ - uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag= v2.4.0
188
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
189
189
with :
190
190
profile : minimal
191
191
toolchain : stable
192
192
override : true
193
- -
uses :
Swatinem/[email protected]
193
+ - uses : Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641 # renovate: tag= v1.3.0
194
194
with :
195
195
key : test
196
- -
uses :
actions-rs/[email protected]
196
+ - uses : actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # renovate: tag= v1.0.3
197
197
with :
198
198
command : test
199
199
@@ -217,19 +217,19 @@ jobs:
217
217
runs-on : ubuntu-latest
218
218
steps :
219
219
- name : Checkout
220
- uses : actions/checkout@v2
220
+ uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.4.0
221
221
- name : Set up Helm
222
-
222
+ uses : azure/setup-helm@a517f2ff6560563a369e16ca7c7d136b6164423f # renovate: tag= v2.0
223
223
with :
224
224
version : v3.6.2
225
225
- name : Set up cargo
226
- uses :
actions-rs/[email protected]
226
+ uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
227
227
with :
228
228
profile : minimal
229
229
toolchain : stable
230
230
override : true
231
231
- name : Set up rust-cache
232
-
232
+ uses : Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641 # renovate: tag= v1.3.0
233
233
with :
234
234
key : charts
235
235
- name : Regenerate charts
@@ -238,7 +238,7 @@ jobs:
238
238
run : git diff --exit-code
239
239
- name : Git Diff showed uncommitted changes
240
240
if : ${{ failure() }}
241
- uses : actions/github-script@v3
241
+ uses : actions/github-script@f05a81df23035049204b043b50c3322045ce7eb3 # renovate: tag= v3
242
242
with :
243
243
script : |
244
244
core.setFailed('Committed charts were not up to date, please regenerate and re-commit!')
@@ -251,7 +251,7 @@ jobs:
251
251
runs-on : ubuntu-latest
252
252
steps :
253
253
- name : Checkout
254
- uses : actions/checkout@v2
254
+ uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.4.0
255
255
- name : placeholder
256
256
run : echo Tests will go here
257
257
@@ -267,10 +267,10 @@ jobs:
267
267
if : needs.select_repo.outputs.repository != 'skip'
268
268
steps :
269
269
- name : Checkout
270
- uses : actions/checkout@v2
271
- - uses : actions/setup-python@v2
270
+ uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.4.0
271
+ - uses : actions/setup-python@7f80679172b057fc5e90d70d197929d454754a5a # renovate: tag= v2
272
272
if : ${{ github.event_name == 'pull_request' }}
273
- -
uses :
actions-rs/[email protected]
273
+ - uses : actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # renovate: tag= v1.0.7
274
274
with :
275
275
profile : minimal
276
276
toolchain : stable
@@ -296,10 +296,10 @@ jobs:
296
296
- name : Package Chart
297
297
run : mkdir -p target/helm && helm package --destination target/helm deploy/helm/${{ env.PRODUCT_NAME }}-operator
298
298
- name : Build Docker image
299
- if : env.NEXUS_PASSWORD != null
299
+ if : env.NEXUS_PASSWORD != null # pragma: allowlist secret
300
300
run : make docker
301
301
- name : Publish Chart
302
- if : env.NEXUS_PASSWORD != null
302
+ if : env.NEXUS_PASSWORD != null # pragma: allowlist secret
303
303
run : >-
304
304
/usr/bin/curl
305
305
--fail
0 commit comments